COOPERATIVE PRIVACY POLICY COMMITTEE
1. INTRODUCTION
At Coopérative Le Comité , d/b/a , d/b/a Le Comité (“we”, “us”, “our” or the “Company”), we value your privacy and the protection of your data. This privacy policy (the “Policy”) describes our privacy practices for the activities described below. In accordance with your rights, we inform you of how we collect, store, access and otherwise treat information relating to individuals. In this Policy, personal data (“Personal Data”) refers to any information that, alone or in combination with other available information, can identify an individual.
We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we follow the obligations set out in the following regulations:
- Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation
Quebec’s Act 25 - EU General Data Protection Regulation (GDPR)
- Brazilian data protection legislation (LGPD)
- California’s Consumer Protection Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
- Colorado Privacy Act (CPA)
- Utah Consumer Privacy Act (UCPA)
- Connecticut Data Privacy Act (CTDPA)
- Virginia Consumer Data Protection Act (VCDPA)
- South African Personal Information Protection Act (POPIA)
SCOPE
This policy applies to Coopérative Le Comité websites, domains, applications, services and products.
This policy does not apply to third-party applications, websites, products, services, or platforms that may be accessed through links (not Cooperative Le Comité) that we may provide to you. These sites are owned and operated independently of us, and have their own separate privacy and data collection practices. Any Personal Data you provide to these sites will be governed by the third party’s own privacy policy. We cannot accept responsibility for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of these sites.
PROCESSING ACTIVITIES
This policy applies when you interact with us by doing any of the following:
- Using our application and services as an authorized user
- Visiting one of our websites that links to this privacy statement
This privacy policy was generated by Enzuzo
2. PERSONAL DATA WE COLLECT
What personal data do we collect?
When you make a purchase, or attempt to make a purchase, we collect the following types of personal data:
This includes:
- Account information such as your name, e-mail address and password
- Payment information such as your billing address, telephone number, credit card, debit card or other payment method.
When you use our products and/or features, we collect the following types of Personal Data:
- Account information such as your name, e-mail address and password
- Payment information such as your billing address, telephone number, credit card, debit card or other payment method
HOW WE COLLECT YOUR PERSONAL DATA
We collect personal data from the following sources:
From you. You may provide us with your Account Information, Payment Information, Financial Information, Demographic Information, Purchase Information, Content, Comments, Product Information, by filling out forms, by using our products or services, by entering information online or by corresponding with us by mail, telephone, e-mail or otherwise. This includes Personal Data you provide, for example, when you :
- Create an account or purchase products on our website;
- Use our products or services;
- Create content through our products or services;
- Expressing an interest in our products or services;
- Download software and/or our mobile application;
- Subscribe to our newsletter;
- Complete a voluntary market survey;
- Contact us with an inquiry or report a problem (by telephone, e-mail, social network or messaging service);
- When you connect to our website via social networks;
Automated technologies or interactions: When you interact with our website, we may automatically collect the following types of data (all described above): Device Data about your equipment, Usage Data about your browsing actions and habits, and Contact Data when tasks performed via our website remain incomplete, such as incomplete orders or abandoned shopping carts. We collect this data using cookies, server logs and similar technologies. Please see our section on cookies (below) for more details.
Third Parties: We may receive Personal Data about you from various third parties, including:
- Another person’s account and payment information when they purchase a gift for you on our website;
- Device and usage data from third parties, including analytics providers such as Google;
- Account information and payment data from social networking platforms when you connect to our website using these social networking platforms;
- Content from communication services, including e-mail providers and social networks, when you give us permission to access your data on these third-party services or networks;
- Account information and payment data from third parties, including organizations (such as law enforcement agencies), associations and groups, who share data for the purposes of fraud prevention and detection and credit risk reduction; and
- Account information, payment data and financial data from technical, payment and delivery service providers.
If you provide us or our service providers with Personal Data relating to other persons, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Policy. If you believe that your Personal Data has been improperly provided to us, or to otherwise exercise your rights with respect to your Personal Data, please contact us using the information set forth in the “Contact Us” section below.
DEVICE AND USAGE DATA
When you visit a Le Comité Cooperative website, we automatically collect and store information about your visit using browser cookies (files we send to your computer), or similar technology. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. The help function of most browsers will provide information on how to accept cookies, disable them or notify you when a new cookie is received. If you do not accept cookies, you may not be able to use certain features of our Service and we recommend that you leave them enabled.
DATA WE COLLECT FROM THIRD PARTIES
We may receive your Personal Data from third parties such as companies subscribing to Le Comité Cooperative’s services, partners and other sources. Such Personal Data is not collected by us but by a third party and is subject to the separate privacy and data collection policies of the relevant third party. We have no control or influence over how your Personal Data is processed by third parties. As always, you have the right to examine and rectify this information. If you have any questions, you should first contact the relevant third party to obtain further information about your Personal Data. If the third party does not satisfy your rights, you can contact the data protection officer at Coopérative Le Comité (contact details below).
Our websites and services may contain links to other websites, applications and services operated by third parties. The information practices of these other services, or the social networks that host our branded social networking pages, are governed by the third parties’ privacy statements, which you should consult to better understand the privacy practices of these third parties.
PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
We collect and use your Personal Data with your consent to provide, maintain and develop our products and services and understand how to improve them.
Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary as part of our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business, for example against fraud. Consent will be required to initiate services with you. New consent will be required if changes are made to the type of data collected. As part of our contract, if you do not give your consent, certain services may not be available to you.
INTERNATIONAL DATA TRANSFER AND STORAGE
Wherever possible, we store and process data on servers located in the general geographic area where you reside (note: this may not be in the country where you reside). Your Personal Data may also be transferred to and stored on servers residing outside your state, province, country or other governmental jurisdiction where data laws may differ from those in your jurisdiction. We will take appropriate steps to ensure that your Personal Data is treated securely and in accordance with this Policy and applicable data protection legislation. Further information on these clauses can be found here: https://eur-lex.europa.eu/legal-content/fr/TXT/?uri=CELEX%3A32021D0914
SHARING AND DISCLOSURE
We will only share your personal data with third parties in the ways described in this policy or defined at the time the personal data is collected.
LEGAL REQUIREMENT
We may use or disclose your Personal Data in order to comply with a legal obligation, as part of a request from a public or governmental authority, or as part of legal or court proceedings, to prevent loss of life or injury, or to protect our rights or property. Where possible and practical, we will notify you in advance of any such disclosure.
SERVICE PROVIDERS AND OTHER THIRD PARTIES
We may use third-party service providers, independent contractors, agencies or consultants to deliver and help us improve our products and services. We may share your Personal Data with marketing agencies, database service providers, backup and disaster recovery service providers, e-mail service providers and others, but only to maintain and improve our products and services. For more information about the recipients of your Personal Data, please contact us using the information in the “Contact us” section below.
3. Cookies
WHAT ARE COOKIES?
A cookie is a small file containing information that your browser stores on your device. The information contained in this file is generally shared with the site owner as well as with potential partners and third parties to this company. The collection of this information may be used as part of the site’s operation and/or to improve your experience.
We do not use cookies.
4. Retention and removal
We will only retain your Personal Data for as long as is necessary to fulfil the purpose for which it was collected and to the extent required by applicable law. When we no longer need the Personal Data, we will delete it from our systems and/or take steps to render it anonymous.
5. Merger or acquisition
If we are involved in a merger, acquisition or sale of assets, your personal information may be transferred. We will notify you before your personal information is transferred and becomes subject to a different privacy policy. In certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests from public authorities (for example, a court or government agency).
6. How we ensure the security of your data
We have implemented appropriate organizational safeguards and security measures to protect your personal data against accidental loss, unauthorized use or access, alteration or disclosure.
Communication between your browser and our website uses a secure encrypted connection when your personal data is involved.
We require any third party contracted to process your personal data on our behalf to implement security measures to protect your data and to process such data in accordance with the law.
In the unfortunate event of a personal data breach, we will notify you and any applicable regulatory body where we are legally required to do so.
7. Children’s privacy
We do not knowingly collect personal data from children under the age of 16.
- Your rights concerning your personal data
Depending on your location and citizenship, your rights are subject to local data privacy regulations. These rights may include:
- Right of access (PIPEDA, article 15 of the RGPD, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)
You have the right to know whether we process your Personal Data and to request a copy of the Personal Data we process about you. - Right of rectification (PIPEDA, Article 16 of the RGPD, CPRA, CPA, VCDPA, CTDPA, LGPD, POPIA)
You have the right to rectify incomplete or inaccurate Personal Data that we process about you. - Right to be forgotten (right to erasure) (Article 17 of the RGPD, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)
You have the right to request that we erase the personal data we process about you, unless we need to retain that data to comply with a legal obligation or to establish, exercise or defend legal claims. - Right to restrict processing (Article 18 of the RGPD, LGPD).
You have the right to restrict our processing of your Personal Data in certain circumstances. In this case, we will not process your Data for any purpose other than storage. - Right to portability (PIPEDA, RGPD Article 20, LGPD)
You have the right to obtain the Personal Data that we hold about you, in a structured electronic format, and to transmit this Personal Data to another data controller, where it is (a) Personal Data that you have provided to us, and (b) if we process this data on the basis of your consent or to perform a contract with you or the third party who subscribes to the services . - Right of withdrawal (CPRA, CPA, VCDPA, CTDPA, UCPA)
You have the right to refuse the processing of your Personal Data for the purposes of: (1) targeted advertising; (2) sale of Personal Data; and/or (3) profiling for decisions that have legal or similar significant effects on you. Under the CPRA, you have the right to refuse the sharing of your Personal Data with third parties and our use and disclosure of your sensitive Personal Data to uses necessary to provide the products and services you reasonably expect. - Right to object (Article 21 of the RGPD, LGPD, POPIA)
Where the legal justification for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will comply with your request, unless we have compelling legitimate grounds for processing that override your interests and rights, or if we need to continue processing Personal Data for the establishment, exercise or defence of legal claims. - Non-discrimination and non-retaliation (CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA)
You have the right not to be refused a service or to have your experience altered for having exercised your rights. - Appeal (CPA, VCDPA, CTDPA)
You have the right to file an appeal based on our response to the exercise of any of these rights. In the event that you do not agree with the manner in which we have resolved the appeal, you have the right to contact the Attorney General located here :
If you are based in Colorado, please visit this website to file a complaint. If you are based in Virginia, please visit this website to file a complaint. If you are based in Connecticut, please visit this website to file a complaint. - Filing a complaint (article 77 of the RGPD, LGPD, POPIA)
You have the right to file a complaint with the competent data protection authority.
If you are based in the EEA, please visit this website (https://edpb.europa.eu/about-edpb/about-edpb/members_fr) for a list of local data protection authorities.
WITHDRAWAL OF CONSENT
If you have consented to the processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge, for example when you wish to opt out of marketing messages you receive from us. If you wish to withdraw your consent, please contact us using the details at the bottom of this page.
HOW TO EXERCISE YOUR RIGHTS
You may make a request to exercise any of these rights in relation to your personal data by sending the request to our privacy team using the form below.
For your own privacy and security, at our discretion, we may ask you to prove your identity before providing the requested information.
9. ChangeS
We may change this Policy at any time. If we make changes to this policy, we will post an updated version of this policy on this website. When you use our services, you will be asked to review and accept our Privacy Policy. In this way, we can record your acceptance and inform you of any future changes to this Policy.
10. CONTACT US
To request a copy of your information, unsubscribe from our e-mail list, request deletion of your data or ask a privacy question, we have a simple process in place:
To contact us, please send an e-mail to [email protected]
Write to us at
Le Comité Data Protection Officer
570 Aylwin, Montreal , Quebec , H1W3B4
Last update: 10/17/2024